This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024c2748-50f2-305e-9819-30f6382d5fe5.roa File: 024c2748-50f2-305e-9819-30f6382d5fe5.roa (raw, json) Hash identifier: upGJVCSU4QcEBB5p5Kn6RmdtPR2jbHgNhtiD5S+2sII= Subject key identifier: 80:FE:41:17:14:9F:A3:83:DA:04:F9:0C:E0:FA:EF:F8:E8:14:64:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27ECDFD74F169BBC06D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024c2748-50f2-305e-9819-30f6382d5fe5.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.172.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7e:cd:fd:74:f1:69:bb:c0:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=5299f1f9-e66d-4eb0-9031-b280d43955c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4f:1e:04:ae:f5:c5:b5:e0:91:20:2b:47:02: 55:5c:01:8b:24:ae:ca:c9:8c:a2:a4:ab:b4:46:f4: b3:f0:12:a0:21:32:f4:a6:82:3a:a6:07:17:d2:3d: b6:00:df:be:82:7d:d6:6b:4d:dd:8d:cb:13:c3:ec: 76:25:41:d5:34:62:6c:c4:cf:2d:4a:1d:55:21:1a: 05:6f:4e:8d:d6:e9:f5:16:15:5b:72:6b:d6:93:2b: 77:fa:0d:9d:82:81:2b:3c:b6:0c:23:60:6e:b9:cd: 63:c6:09:00:02:e9:c1:9b:b6:95:12:12:32:dc:61: 4d:9d:f0:92:79:71:1d:54:e5:74:2c:49:c7:bd:1b: 63:4e:36:81:b2:e0:fc:bb:12:6e:04:5a:3a:24:0b: 64:09:f9:70:fa:45:24:36:0e:5d:2e:9a:98:f9:50: 94:19:46:7b:c6:d3:28:89:c9:4a:4a:0f:ef:be:f0: b4:a6:7f:3e:a8:ea:22:a5:c6:92:2e:45:0b:d8:5e: 6b:3e:5a:8d:e6:61:e0:77:3e:4d:d1:76:a5:e0:c8: 62:f8:e9:4e:70:be:06:0f:76:a6:92:89:70:ea:e8: 8a:8f:7c:34:d6:dd:00:82:f0:c1:ba:db:51:ea:04: 46:a5:df:60:d2:1e:0e:c1:bc:27:9c:d6:73:38:bd: e1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FE:41:17:14:9F:A3:83:DA:04:F9:0C:E0:FA:EF:F8:E8:14:64:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024c2748-50f2-305e-9819-30f6382d5fe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5d:d5:32:30:1e:70:65:9e:4b:84:69:43:5a:eb:de:32:81: 6e:09:1b:c8:80:da:77:7f:ac:ca:cb:f6:5c:0e:5a:2c:2b:63: 08:b1:99:5e:9a:01:b3:37:b6:38:07:a4:c4:83:4a:f8:5d:23: 92:bc:04:c1:69:32:4c:b4:b8:23:d1:7d:9c:f7:18:24:13:3d: 4f:ae:ba:30:c4:ca:01:d5:dc:c8:2e:60:6a:3d:82:5c:0a:b4: 02:31:59:51:61:69:4d:33:9c:1c:51:2c:bb:42:92:9b:13:52: 7a:76:95:6a:54:31:58:5a:aa:a7:6e:7c:14:c1:25:e9:58:25: 93:8d:c6:8c:eb:a8:3f:c0:64:fc:03:06:38:90:dd:fb:d5:8f: a3:b4:e3:7b:ec:ed:fc:85:33:96:7a:7f:eb:fe:c1:8f:d1:88: dc:69:3e:d2:34:bb:6a:99:cf:4f:5e:8e:c8:26:22:09:4b:68: 31:5d:f4:9a:3b:e7:24:3d:9f:bb:a0:2a:9a:54:65:fb:a2:24: 4d:30:3a:7d:67:e7:6c:9b:6f:81:3e:f6:ba:1c:06:be:39:5e: 24:4d:1e:81:d0:d2:55:65:b7:cf:1d:4c:cf:33:67:9d:05:99: 01:5f:68:1a:90:9d:4c:e9:dd:8f:4f:b8:4a:12:a0:00:22:63: af:37:5f:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28n7N/XTxabvAbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTI5OWYxZjktZTY2ZC00ZWIwLTkwMzEtYjI4MGQ0Mzk1NWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt08eBK71xbXgkSArRwJVXAGLJK7KyYyipKu0 RvSz8BKgITL0poI6pgcX0j22AN++gn3Wa03djcsTw+x2JUHVNGJsxM8tSh1VIRoF b06N1un1FhVbcmvWkyt3+g2dgoErPLYMI2Buuc1jxgkAAunBm7aVEhIy3GFNnfCS eXEdVOV0LEnHvRtjTjaBsuD8uxJuBFo6JAtkCflw+kUkNg5dLpqY+VCUGUZ7xtMo iclKSg/vvvC0pn8+qOoipcaSLkUL2F5rPlqN5mHgdz5N0Xal4Mhi+OlOcL4GD3am kolw6uiKj3w01t0AgvDButtR6gRGpd9g0h4OwbwnnNZzOL3h5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFID+QRcUn6OD2gT5DOD67/joFGSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDI0YzI3NDgtNTBmMi0z MDVlLTk4MTktMzBmNjM4MmQ1ZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqzWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFd1TIwHnBlnkuEaUNa694ygW4JG8iA2nd/rMrL9lwOWiwrYwixmV6a AbM3tjgHpMSDSvhdI5K8BMFpMky0uCPRfZz3GCQTPU+uujDEygHV3MguYGo9glwK tAIxWVFhaU0znBxRLLtCkpsTUnp2lWpUMVhaqqdufBTBJelYJZONxozrqD/AZPwD BjiQ3fvVj6O043vs7fyFM5Z6f+v+wY/RiNxpPtI0u2qZz09ejsgmIglLaDFd9Jo7 5yQ9n7ugKppUZfuiJE0wOn1n52ybb4E+9rocBr45XiRNHoHQ0lVlt88dTM8zZ50F mQFfaBqQnUzp3Y9PuEoSoAAiY683X5A= -----END CERTIFICATE-----Generated at Sat Dec 6 19:30:36 2025 by rpki-client